Facebook was forced to pay $650 million in 2021 for violating Illinois' Biometric Information Privacy Act[1]. That's not necessarily grounds for a federal regulatory action, but if something like this happens in the future the does violate federal law (in the article, this was caused by not paying sufficient attention to COPPA), it could mean Facebook has to delete/re-do quite a bit of work in addition to purely monetary damages.

[1] https://techcrunch.com/2021/03/01/facebook-illinois-class-ac...